Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/U6tjHsrQAA5m0iX9NOVMqBD5YNE.roa
File: U6tjHsrQAA5m0iX9NOVMqBD5YNE.roa (raw, json)
Hash identifier: zrai7x0NczIUCtra09Ru29U4WTkTsWEDeY3n8pnBnTo=
Subject key identifier: 53:AB:63:1E:CA:D0:00:0E:66:D2:25:FD:34:E5:4C:A8:10:F9:60:D1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01861D9FFD959600D524D20BB5A782FCEF19
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/U6tjHsrQAA5m0iX9NOVMqBD5YNE.roa
Signing time: Sat 04 Feb 2023 18:11:09 +0000
ROA not before: Sat 04 Feb 2023 18:11:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:1d:9f:fd:95:96:00:d5:24:d2:0b:b5:a7:82:fc:ef:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 4 18:11:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=53ab631ecad0000e66d225fd34e54ca810f960d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1d:ba:69:bb:f9:e1:10:28:7d:2d:c1:55:47:
ba:e1:6a:47:e8:96:c6:91:c3:3e:ba:fb:c1:53:26:
5a:14:1f:82:fd:3e:5c:7a:f8:49:b2:18:b1:90:64:
4a:15:89:d9:e3:fc:5e:d3:ed:12:5d:90:6a:d2:9f:
6c:dc:a2:30:2e:ab:6f:9f:73:5e:4c:7a:03:e3:31:
3d:ea:52:85:44:80:d4:11:a5:fc:6c:2b:7d:de:9f:
f8:db:00:e8:a3:52:bf:f1:14:3c:a2:d6:14:0f:a0:
68:80:3e:63:a2:ac:64:1c:41:38:32:64:7a:b6:40:
f9:0b:24:68:53:8f:8d:0a:1e:2b:5e:02:22:18:d5:
b7:21:c5:7a:37:00:89:0e:6b:79:a6:c0:fe:5c:4f:
00:61:ac:8b:c6:fd:3d:78:3e:38:21:dd:1f:5c:bf:
84:a9:d7:f3:6e:ba:23:6b:4e:bb:4e:5d:0d:6c:c9:
99:0a:72:72:f4:62:57:0b:a6:b8:1f:e2:01:9f:ff:
66:b2:9e:dd:6b:99:4b:c0:b8:5b:a4:bc:bf:04:bb:
b5:66:eb:49:eb:45:1c:fc:d1:ab:e2:bc:f0:24:d9:
d0:03:52:23:de:6d:5b:ea:57:0a:5a:e5:69:4a:d2:
0d:76:6f:ac:03:85:91:e9:33:c2:bb:f9:0f:e1:8b:
d4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:AB:63:1E:CA:D0:00:0E:66:D2:25:FD:34:E5:4C:A8:10:F9:60:D1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/U6tjHsrQAA5m0iX9NOVMqBD5YNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3f:ae:b7:e9:ff:c0:f8:bf:e2:78:d6:09:28:32:d1:4f:45:74:
84:17:9e:93:26:c4:7f:1f:4f:0c:a2:2c:cd:73:70:c0:1c:ad:
9d:46:37:55:9c:c9:0c:56:33:46:28:3a:14:74:e1:c9:b7:70:
28:21:65:7b:eb:fb:a5:45:81:ce:09:b7:71:99:29:4a:15:42:
12:e1:16:cb:f4:aa:a3:0c:d2:7a:2e:41:b3:ee:f0:86:a9:05:
c2:b3:25:41:c5:39:69:b8:e3:96:33:9f:ba:5c:1d:c7:78:ed:
60:3d:fb:07:47:09:c5:51:7b:ae:7d:e1:59:8f:ac:01:ea:ec:
29:2d:5b:2a:00:69:b3:b2:28:9a:64:c9:a9:15:ac:d2:d5:a4:
45:71:1e:32:49:fb:de:ac:d1:c0:bc:a1:2f:5e:dd:40:43:52:
30:40:79:7b:cf:87:45:2d:0a:32:78:4d:f9:2e:17:da:37:4c:
90:5f:39:5c:8a:22:0a:47:13:69:bf:2c:1c:4e:7e:f1:d9:52:
50:77:80:8e:6c:2d:71:45:f0:c5:4f:c8:9b:89:f4:dc:e3:90:
f3:5d:74:ab:6e:74:62:e9:aa:ad:6d:b5:7e:ff:f4:a3:c7:e6:
98:c9:8e:7b:1f:dc:9e:bd:35:13:30:95:48:5b:57:46:63:ba:
d9:a3:01:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:21:45 2025 by rpki-client